{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "ransom", "trigger": true, "arguments": ["attacker", "place", "victim", "price", "tool", "damage amount", "payment method", "attack pattern"]}, {"event_type": "phishing", "trigger": true, "arguments": ["damage amount", "victim", "place", "purpose", "attack pattern", "trusted entity", "tool", "attacker", "time"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["vulnerable system owner", "discoverer", "vulnerable system version", "vulnerability", "supported platform", "time", "vulnerable system"]}, {"event_type": "data breach", "trigger": true, "arguments": ["damage amount", "victim", "tool", "purpose", "number of data", "compromised data", "attack pattern", "attacker", "place"]}, {"event_type": "patch vulnerability", "trigger": true, "arguments": ["vulnerable system", "patch number", "releaser", "issues addressed", "common vulnerabilities and exposures", "vulnerability", "patch", "supported platform"]}], "input": "Emotet is known to constantly evolve , and in the past few weeks has masqueraded as the IRS , pretending to be “ IRS Online . ”"}
{"ransom": [], "phishing": [{"trigger": "has masqueraded as", "arguments": {"damage amount": "NAN", "victim": "NAN", "place": "NAN", "purpose": "NAN", "attack pattern": "NAN", "trusted entity": "the IRS", "tool": "Emotet", "attacker": "NAN", "time": "the past few weeks"}}], "discover vulnerability": [], "data breach": [], "patch vulnerability": []}